PT-2026-57644 · Sourcecodester · Online Book Store System

Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-15539

Mitre

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2026-15539

Affected Products

Online Book Store System

References · 7

• 🔥 https://medium.com/@hemantrajbhati5555/critical-authenticated-remote-code-execution-rce-via-unrestricted-file-upload-5a4a313ea1f1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15539 · Security Note
• https://vuldb.com/vuln/377889 · Note
• https://vuldb.com/cve/CVE-2026-15539 · Note
• https://vuldb.com/vuln/377889/cti · Note
• https://vuldb.com/submit/855046 · Note
• https://sourcecodester.com · Note